Threat database

5 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.3	EPSS 0.4%	CVE-2024-40322JFinalCMS · n/a Medium6.3EPSS 0.4%2024-07-16CVE Database V5CVE-2024-40322 An issue was discovered in JFinalCMS v.5.0.0. There is a SQL injection vulnerablity via /admin/div_data/data EPSS 0.4%Vulnerability CWE-89	CVE Database V5	2024-07-16
Medium	6.1	EPSS 0.4%	CVE-2024-22496 · n/a Medium6.1EPSS 0.4%2024-01-23CVE Database V5 Cross Site Scripting (XSS) vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the /admin/login username parameter. EPSS 0.4%Vulnerability CWE-79	CVE Database V5	2024-01-23
Medium	6.1	EPSS 0.4%	CVE-2024-22497 · n/a Medium6.1EPSS 0.4%2024-01-23CVE Database V5 Cross Site Scripting (XSS) vulnerability in /admin/login password parameter in JFinalcms 5.0.0 allows attackers to run arbitrary code via crafted URL. EPSS 0.4%Vulnerability CWE-79	CVE Database V5	2024-01-23
Medium	5.4	EPSS 0.6%	CVE-2024-22493JFinalcms · n/a Medium5.4EPSS 0.6%2024-01-12CVE Database V5CVE-2024-22493 A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save content parameter, which allows remote attackers to inject arbitrary web script or HTML. EPSS 0.6%Vulnerability CWE-79	CVE Database V5	2024-01-12
Medium	5.4	EPSS 0.5%	CVE-2024-22494 · n/a Medium5.4EPSS 0.5%2024-01-12CVE Database V5 A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save mobile parameter, which allows remote attackers to inject arbitrary web script or HTML. EPSS 0.5%Vulnerability CWE-79	CVE Database V5	2024-01-12

Page 1 of 1